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TITLE 

APPARATUS AND METHOD FOR PROCESSING DATA CALL IN 
PRIVATE WIRELESS HIGH-SPEED DATA SYSTEM 

CLAIM OF PRIORITY 
[0001] This application makes reference to, incorporates the same herein, and claims all benefits 
accruing under 35 U.S.C. §119 from an application for APPARATUS AND METHOD FOR 
PROCESSING A DATA CALL IN A PRIVATE WIRELESS HIGH-SPEED DATA SYSTEM earlier 
filed in the Korean Intellectual Property Office on 29 April 2003 and there duly assigned Serial No. 
2003-27334. 

BACKGROUND OF THE INVENTION 
Field of the Invention 

[0002] The present invention relates to an apparatus and method for processing a data call in a 
private wireless high-speed data system and, more particularly, to an apparatus and method for 
processing a data call in a private wireless high-speed data system in which when there is a call 
connection to a private wireless high-seed data system network of which the security is required with 
a wireless terminal of a wireless high-speed data system (i.e., CDMA lx EV-DO) scheme, the 
connection to the private EV-DO wireless network is allowed but the connection to a public EV-DO 
wireless network is blocked. 
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Description of the Related Art 
[0003] Generally, a CDMA lx EV-DO (code division multiple access lx evolution data only 
(sometimes also called evolution data optimized), hereinafter, referred to as EV-DO) wireless 
network is a new packet wireless data transmission technology developed using a CDMA technology 
by QUALCOMM, which allows mega class high-speed data transmission. The EV-DO wireless 
network has a maximum transmission speed of 2.4Mbps (megabits per second) in a forward direction 
and 307.2Kbps in a backward direction, which is the same transmission speed as that in an 
asymmetric digital subscriber line (ADSL) scheme used in a wired network. 
[0004] The advent of the EV-DO is because the lx RTT system of an IMT-2000 MC 
(Multi-Carrier; synchronous), which has been developed to support both voice and data and has been 
tested for commercial use, has a limit in high-speed data transmission of 1.25MHz (megahertz) 
bandwidth and also does not support data transmission of 144 Kbps or more in an IS-95 
(Telecommunication Industry Association (TIA)/ Electronic Industry Alliance (ELA) IS-95) scheme. 
That is, the EV-DO has appeared as a supplementary solution for the high-speed data transmission. 
[0005] The EV-DO provides a connection to the data dedicated Internet over a data core network 
(DCN) in an existing IS-95 network. It can support the same data transmission speed as an existing 
one, even in the third generation (3G) network. 

[0006] The EV-DO has an average forward transmission speed allowing high-speed data 
communication of several hundred kbps. Notwithstanding, the used radio frequency bandwidth is 
1 .25MHz, which is the same as a mobile phone used in a current CDMA One. 
[0007] Considering that a bandwidth of 5 MHz is required to provide 384bps service in the 
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IMT-2000, the system is regarded as a system of high frequency usage efficiency. 
[0008] That is, the EV-DO has been designed in a manner suitable for data communication that * 
is not affected by delay or instant when transfer data is burst data as in the Internet, realizing the 
high-speed transmission with a frequency bandwidth narrower than that of the IMT-2000. 
[0009] Further, the EV-DO performs a function of automatically adjusting backward transmission 
speed at a base station side according to communication quality between a terminal and a base 
station. This function is realized by monitoring a signal from the terminal received at the base 
station per 1.67m/s to recognize the communication quality and by adjusting data transmission 
priority and speed with the terminal. 

[0010] It improves data communication quality by preferentially increasing transmission speed 
for a terminal in the vicinity of the base station where electric wave interference is less while by 
reducing communication speed for a terminal located far from the base station. 
[0011] A typical wireless network is classified into a wireless public network and a wireless 
private network, which is used at groups, companies, or the like having a particular purpose. The 
wireless private network is configured to interwork with a particular wireless public network. On 
the other hand, in the above-described EV-DO wireless network, there exists only public EV-DO • 
wireless network service provided by a mobile communication service provider while there is no 
private EV-DO wireless network service, unlike the typical wireless network. 
[0012] Thus, it is a trend that methods are being developed which use a part of a public EV-DO 
wireless network as a private EV-DO wireless network. These methods allow one mobile terminal 
to be served by the private EV-DO wireless network in a particular region (private region) while by 
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the public EV-DO wireless network in other regions. 

[0013] One of these methods was proposed in the Korean patent application No. 1 0-2002-0054625 
filed on September 10, 2002 by the same applicant and entitled "Method and System for Using in 
Common a Public Network and a Private Network in a Wireless High-speed Data System". 
[0014] The proposed "method and system for using in common a public network and a private 
network in a wireless high-speed data system" will be simply discussed. Among methods for 
implementing a private EV-DO wireless network (private network) in an EV-DO network, the 
following methods have been suggested therein in configuring DLR (data location register) and 
AN_AAA (access network authentication accounting authorization) essential to the EV-DO 
configuration. 

[0015] First, in the case of the DLR, there is a scheme of handling private network connection by 
allowing a direct connection to the public network DLR in order to configure the private network . 
or by disposing a private dedicated DLR in the private network. Further, in the case of the 
AN_AAA, private authentication is handled by allowing a direct connection to the public network 
AN_AAA in order to handle private network connection authentication or by disposing a private 
dedicated AN_AAA in a private network, as in the DLR. 

[0016] However, although such methods have advantages in their own way, the methods are not * 
suitable for a region of which the security is required, namely, a private EV-DO wireless network 
as they allow a free connection from the private EV-DO wireless network to the public EV-DO 
wireless network. In particular, there is a problem with a direct connection scheme to the public 
EV-DO wireless network DLR in that building private EV-DO wireless network service is 
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impossible because paging to the private EV-DO wireless network is not accomplished. 

SUMMARY OF THE INVENTION 
[0017] It is, therefore, an object of the present invention to provide an apparatus and method for 
processing a data call in a private wireless high-speed data system in which, when a wireless terminal 
of a CDMA lx EV-DO scheme enters a private EV-DO wireless network and makes a call 
connection to the private EV-DO wireless network, the security maintenance of the private EV-DO 
wireless network is efficiently performed by allowing the call connection to the private EV-DO " 
wireless network to be established while the call connection to the public EV-DO wireless network 
to be blocked. 

[0018] Thus, it is possible to prevent information outflow through the Internet with a public 
EV-DO wireless network connection, to limit private service with respect to a terminal having no 
permission, and to block in advance illegal information outflow through the Internet with a private 
EV-DO wireless network connection. 

[0019] It is another object of the apparatus and method for processing a data call in the private 
EV-DO wireless network system according to the present invention, independently constructing DLR 
and AN_AAA, which are essential to an EV-DO wireless network configuration, in a private EV-DO 
wireless network to block an EV-DO terminal from maintaining a public network session and allow 
the EV-DO terminal to maintain only a private network session within a private area in building the 
private EV-DO wireless network in an area where security is required, so that the public network 
connection is not established. 
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[0020] It is yet another object in the apparatus and method for processing a data call in the private 
EV-DO wireless network system with an existing public network session that is easy to implement 
and efficient in providing security for the private network session. 

[0021] According to the present invention for achieving the above and other objects, there is 
provided an apparatus for processing a data call in a private EV-DO wireless network system, 
including: relay means for relaying a UATI (unicast access terminal identifier) request message when 
the UATI request message is received from a terminal entering a private EV-DO wireless network, 
the UATI request message including a public network UATI (oldati) allocated in a public EV-DO 
wireless network; call processing means for: a) generating a new private EV-DO wireless network 
UATI request signal in response to the UATI request message relayed by the relay means, and, when 
a UATI response message (Unknown UATI) corresponding to the UATI request signal is received, 
closing a session created at the terminal and the public network according to the received message, 
and b) relaying a new UATI request message provided from the terminal through the relay means, 
the new UATI request message including random UATI information, and sending an authentication 
request signal to the connection terminal through the relay means when a private network session 
is established with the terminal according to a newly allocated UATI; and session information 
processing means for providing a UATI response message to the call processing means in response 
to the private EV-DO wireless network UATI request signal generated from the call processing . 
means, allocating the new UATI to the connection terminal according to the relayed new UATI 
request message from the call processing means to establish the private EV-DO wireless network 
session with the terminal, and then storing the established session information in a database of the 
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session information processing mean. 

[0022] The apparatus farther may include authentication means connected to the call processing 
means for: when N AI (network access identifier) information for authentication is received through 
the call processing means from the terminal, authenticating based on the corresponding NAI 
information whether the corresponding connection terminal is a terminal registered in the private 
EV-DO wireless network; and sending a mobile node identifier (MN ID) value as a return value to 
the terminal through the call processing means and the relay means, and providing the mobile node 
identifier (MN ID) value of the connection terminal to the session information processing means to 
be stored along with the session information in the database of the session information processing . 
means. 

[0023] When a call connection request signal is received from the terminal entering the private 
EV-DO wireless network in a state where the new private network session has been established with 
the terminal, the session information processing means provides the call processing means with the 
private EV-DO wireless network session information of the corresponding connection terminal ' 
stored in the database. 

[0024] When a call connection request signal is received from the terminal entering the private 
EV-DO wireless network in a state where the new private network session with the terminal has been 
established, the call processing means establishes a traffic channel to the connection terminal 
according to the private EV-DO wireless network session information of the corresponding 
connection terminal provided from the session information processing means. 
[0025] The call processing means may include a routing module for: when a call connection 
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request signal is received through the relay means from the terminal entering the private EV-DO 
wireless network in a state where the new private network session with the terminal has been 
established, determining, based on temporary identifier information contained in the call connection 
request signal, whether a corresponding terminal connection call is a private EV-DO wireless 
network connection call or a public EV-DO wireless network connection call, and routing the 
corresponding connection call to the private EV-DO wireless network or the public EV-DO wireless 
network according to the determining result. 

[0026] The apparatus may include a data packet service node for providing data service over the 
Intranet in the private EV-DO wireless network to the corresponding terminal through the call 
processing means when a traffic channel to the corresponding terminal is allocated from the call 
processing means and call processing is implemented. 

[0027] Meanwhile, there is provided a method for processing a call in a private EV-DO wireless 
network system, the private EV-DO wireless network system being interworked with a public 
EV-DO wireless network system including a public data location register, the private EV-DO 
wireless network system including a private base station, a private control station, a private data 
location register, a private authentication processor and a data service node, the method including: 
a first step of sending, by the private base station, a UATI request message that is sent from a 
terminal entering a private EV-DO wireless network, to the private data location register through the 
private control station, the UATI request message including UATI (oldati) allocated in the public * 
EV-DO wireless network when the UATI request message is received; a second step of analyzing 
whether the UATI included in the UATI request message sent through the private control station is 
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UATI allocated by the data location register, and sending to the private control station a UATI 
response message for notifying that it is not the UATI allocated by the data location register when 
it is not the UATI allocated by the data location register, by the data location register; a third step 
of closing, by the private control station receiving the UATI response message sent from the private 
data location register, a session created in the terminal and the public EV-DO wireless network in 
response to the received UATI response message; a fourth of allocating a new UATI, establishing 
a private EV-DO wireless network session with the terminal, and storing the session in a database 
of the private data location register, by the private data location register, when a UATI request 
message including random UATI information from the terminal is sent through the private base 
station and the private control station to the private data location register after the session has been • 
closed; and a fifth step of performing, by the private authentication processor, private authentication 
of the terminal using a mobile node identifier (MN ID) value sent from the terminal when the new 
private network session is established, and then storing the mobile node identifier (MN ID) value 
of the corresponding terminal along with session information in a database of the private data 
location register. 

[0028] The method may include a sixth step of, when there is a call connection request from the 
terminal entering the private EV-DO wireless network in a state where the private network session 
with the terminal has been established through the first to fifth steps, sending a call connection 
request signal from the terminal to the private control station, by the private base station; a seventh 
step of determining, by the private control station, whether the call connection request signal sent 
from the private base station is a private EV-DO wireless network connection request signal or a 
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public EV-DO wireless network connection request signal; an eighth step of requesting, by the 
private control station, session information to the private data location register when the connection 
request signal from the corresponding terminal is the private EV-DO wireless network connection 
request signal; a ninth of retrieving, by the private data location register, session information of the 
corresponding terminal stored in the database of the private data location register to send the session 
information to the private control station; and a tenth of allocating a traffic channel to the terminal 
using the session information sent from the private data location register, and performing data 
service over the allocated traffic channel, by the private control station. 

[0029] The method may include the steps of: when it is determined in the seventh step that the call 
connection request signal sent from the private base station is the public EV-DO wireless network 
connection request signal, sending, by the private control station, the session information request 
signal of the corresponding terminal according to the call connection request signal, to the data 
location register in the public EV-DO wireless network; determining, by the public data location 
register, whether the session information of the corresponding terminal is the session information 
allocated in the public EV-DO wireless network in response to the session information request which 
sent through the private control station in the private EV-DO wireless network; when the session 
information of the terminal is not the session information allocated in the public EV-DO wireless 
network, providing to the private control station a response message (Unknown U ATI) notifying that 
the session information of the corresponding terminal is not the session information allocated by the 
public EV-DO wireless network; and closing, by the private control station, the private network 
session with the terminal to block a connection to the public network in response to a response 
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message provided from the data location register in the public EV-DO wireless network. 
[0030] Meanwhile, there is provided a method for processing a call in a private EV-DO wireless " 
network system, including the steps of: receiving a UATI request message from a terminal entering 
a private EV-DO wireless network, the UATI request message including a UATI (old uati) allocated 
in a public EV-DO wireless network; determining whether the old uati included in the received 
UATI request message is UATI allocated in the private EV-DO wireless network; when it is 
determined that the UATI included in the sent UATI request message is not the UATI allocated in 
the private EV-DO wireless network, closing a public EV-DO wireless network session established 
with the terminal; when a UATI request message including random UATI information is received 
from the terminal after the session has been closed, allocating a new UATI according to the received 
random UATI information, establishing a private EV-DO wireless network session with the terminal, 
and storing the session in a database; and when the new private EV-DO wireless network session 
is established, sending an authentication request signal to the terminal, and when an MNID value of 
the terminal needed for authentication is received from the terminal, performing private 
authentication for the corresponding terminal using the received MN-ID of the terminal, and then 
storing the mobile node identifier (MN ID) value of the corresponding terminal along with the • 
session information in the database. 

[0031] The method may include the steps of: when there is a call connection request from the 
terminal entering the private EV-DO wireless network in a state where private session has been 
established with the terminal, determining whether a corresponding call connection request signal 
is a private EV-DO wireless network connection request signal or a public EV-DO wireless network 
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connection request signal; retrieving session information of the corresponding terminal stored in the 
database when it is determined that the connection request signal from the corresponding terminal 
is the private EV-DO wireless network connection request signal; and allocating a traffic channel 
to the terminal according to the retrieved session information of the corresponding terminal and 
performing data service through the allocated traffic channel. 

[0032] The method may include the steps of: when the call connection request signal from the 
terminal is the public EV-DO wireless network connection request signal, requesting the public 
EV-DO wireless network to provide a session information request signal of a corresponding terminal 
according to the call connection request signal; and when receiving, from the public EV-DO wireless 
network, a response message indicating that the session information of the corresponding terminal 
is not the session information allocated in the public EV-DO wireless network in response to the 
request, closing the private network session with the terminal to block the connection to the public . 
network in response to the response message provided from the public EV-DO wireless network. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0033] A more complete appreciation of the invention, and many of the attendant advantages 
thereof, will be readily apparent as the same becomes better understood by reference to the following ' 
detailed description when considered in conjunction with the accompanying drawings, in which like 
reference symbols indicate the same or similar components, wherein: 

[0034] Fig. 1 is a view illustrating a network connection configuration with a public wireless 
high-speed data system for implementing an apparatus for processing a data call in a private wireless 
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high-speed data system according to the present invention; 

[0035] Fig. 2 is a view illustrating a private network session establishment process when a 
terminal enters a private network in a method for processing a data call in a private wireless 
high-speed data system according to the present invention; 

[0036] Fig. 3 is a view illustrating a procedure of call processing in a private network when there 
is a private network connection request from a terminal entering a private network in a method for 
processing a data call in a private wireless high-speed data system; 

[0037] Fig. 4 is a view illustrating a procedure of call processing in a private network when there " 
is a public network connection request from a terminal entering the private network in a method for 
processing a data call in a private wireless high-speed data system according to the present invention; 
and 

[0038] FIG. 5 shows an example of a computer including a computer-readable medium having 
computer-executable instructions for performing a technique of the present invention. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
[0039] Hereinafter, preferred embodiments of an apparatus and method for processing a data call 
in a private wireless high-speed data system will be described in detail with reference to the 
accompanying drawings. 

[0040] Fig. 1 is a view illustrating a network connection configuration with a public wireless 
high-speed data system for implementing an apparatus for processing a data call in a private wireless 
high-speed data system according to the present invention. In connection with the configuration and 
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operation thereof, the configuration of a public EV-DO wireless network 100 and a private EV-DO 
wireless network 200 will be separately discussed. 

[0041] First, as shown in Fig. 1, an access terminal (AT) 1 10 in the public EV-DO wireless 
network 100 is a terminal that can be used in common in the public EV-DO wireless network 100 
and the private EV-DO wireless network 200. A terminal 210 in the private EV-DO wireless 
network 200 is a terminal registered in the public EV-DO wireless network 1 00 and can be also used 
in common in the private EV-DO wireless network 200. 

[0042] Further, access network transceiver systems (ANTSs; public network base stations) 1 20a, 
120b and 120c in the public EV-DO wireless network 100 have desired public wireless areas, 
respectively. When a terminal enters the area of ANTS ( 1 20a, 1 20b, 1 20c), the corresponding ANTS 
establishes a session and performs an operation needed upon allocating a unicast access terminal 
identifier (UATI) which is necessary for the corresponding AT 1 1 0. Further, the ANTS 1 20a, 1 20b 
and 120c allow the AT 1 10 to receive a call, or relay a call connection request signal to access . 
network controls (ANCs) 1 30a and 1 30b when there is a call connection request from the AT 1 1 0. 
[0043] The ANCs 130a and 130b are each connected to a global area network (GAN) 140 as a 
hub, and the GAN 140 in turn is connected to access network authentication accounting 
authorization (AN_AAA) 170, as a private authentication system, which is responsible for public 
network authentication, public network terminal authentication or the like, a packet data serving ' 
node (PDSN) 180 for performing Internet service for terminals, a data location register (DLR) 160 
for storing information on terminals, location information of the terminals or the like, and a base 
system manager (BSM) 1 50 which is responsible for loading, failure, diagnosis, statistics or the like 
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of a system. The GAN performs a data relay function between the respective nodes. Moreover, the 
ANTS 120a 5 120b and 120c in the public EV-DO wireless network 100 may be directly connected 
to the GAN 140, but this is not shown in Fig. 1. 

[0044] The PDSN 1 80 may be connected to other packet service nodes or to pPDSN 270 in the 
private EV-DO wireless network 200 over the Internet, but this is not shown. 
[0045] The DLR 160 stores information {e.g., MN ID (MSI) information) and location 
information of the terminals 1 1 0 and 2 1 0 registered in the public EV-DO wireless network 1 00, and 
provides the information of the terminals 110 and 210 upon updating the session of the 
corresponding terminal. The DLR 160 also stores information on terminals included in a typical 
wireless public network. Here, the terminal information of the typical wireless public network may 
include at least one of terminal information, user information, aiid service class information. 
[0046] Meanwhile, ANTS 220 in the private EV-DO wireless network 200 provides an incoming 
call to the AT 210 entering the private area, or relays a call connection signal to a private access 
network control (pANC) 230 as a private control station when a call connection from the AT 210 
is established. 

[0047] The pANC 230 may include a router module 225 (the router module 225 can also be 
separate from the pANC 230) as a hub that determines, based on an identifier included in a data call 
originated by the AT 2 1 0, whether the originated data call is an originated call for connecting to the 
public network or an originated call for connecting to the private network, and that routes the 
originated call to the ANC 1 30 in the public EV-DO wireless network 1 00 when it is the originated 
call for the public network connection and routes the originated call to be handled in the private 
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network EV-DO wireless network 200 when it is the originated call for the private network 
connection. 

[0048] The router module 225 has a predetermined specific server address. The router module 
225 compares this server address to temporary identifier information, and, when there is a call 
request to a temporary identifier terminal, having a particular server, of which the temporary 
identifier address is predefined, detects the call as a call in the private EV-DO wireless network 200 
to route the corresponding call to the pANC 230. 

[0049] For example, a temporary identifier of a private EV-DO wireless network 200 subscriber 
is allocated to have predetermined server addresses. If the predetermined server addresses are for 
example ones of a server for "samsung.co.kr", a DML server for "samsung.com" and the like, the 
terminal 210 in the private EV-DO wireless network 200 may have an address of 
"1 1 l@samsung.co.kr". 

[0050] Thus, when a call connection of the AT 2 1 0 in the private EV-DO wireless network 200 
to one of predetermined server addresses is requested or a call connection is requested with a 
terminal having the above server, for example, a terminal for "aaa@samsung.co.kr", it is detected 
as a call in the private EV-DO wireless network 200. 

[0051] If any one of a server included in the temporary identifier of the AT 2 1 0 requesting a call, 
a server which is required to receive a call, and a temporary identifier server of a terminal which is 
required to receive a call does not have a predetermined address, the corresponding call is decided ■ 
to be the public EV-DO wireless network 100 connection call and is routed to the ANCs 130a and 
130b in the public EV-DO wireless network 100. 
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[0052] The pANC 230, which includes such a router module 225, stores location information and 
other authentication information of the private AT 2 1 0 and then provides the information needed to 
process the call when the call connection from the private EV-DO terminal AT 210 is established. 
[0053] Further, to the pANC 230, a pPDSN 270 is connected for providing Internet service to the 
private EV-DO terminal AT 210 through an Intranet and a web server manager (WSM) 250 is also 
connected which is responsible for loading, failure, diagnosis, statistics or the like of the private 
EV-DO wireless network 200 system. Here, the above-described network components in the private 
EV-DO wireless network 200 are similar with the components used in the public EV-DO wireless 
network 100 in their nature and function. 

[0054] However, the pDLR 240 in the private EV-DO wireless network 200 does not interwork * 
with the public network DLR 160 and exists in the completely independent form. The private 
pANAAA 260 registers only terminals of which the usage of private EV-DO wireless network 200 
service is permitted, and is responsible for the authentication of a corresponding terminal upon 
connection of the terminal to the private EV-DO wireless network 200. 

[0055] In the end, the private EV-DO wireless network 200 in accordance with the present 
invention may be composed of the private control station pANC 230 for supporting the private 
EV-DO wireless network service, the pDLR 240 storing the location information and other 
information of the private EV-DO wireless network 200 AT 210, the pPDSN 270 for Internet 
services, and the pAN_AAA 260 for performing private terminal authentication. 
[0056] The call processing operation of the private EV-DO wireless network system according 
to the present invention configured as above will be discussed in detail. 
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[0057] First, the private EV-DO wireless network 200, as shown in Fig. 1 , is configured by adding . 
the pANC 230 between the public network ANTS 120 (120a through 120c) and the public network 
ANC 130 (13a and 130b) and by adding network elements needed for the EV-DO service to the 
pANC 230. 

[0058] One of important functions of the pANC 230 is to discriminate and deliver various 
messages from the private ANTS 220 to the public EV-DO wireless network 1 00 and to the private 
EV-DO wireless network 200. This is served by the router module 225 in the pANC 230, as 
described above. 

[0059] For example, when the EV-DO wireless terminal AT 210 located in the private EV-DO 
wireless network 200 attempts to connect to the public EV-DO wireless network 1 00, the pANC 230 
recognizes an identifier (discriminator) contained in a message which is sent from the private ANTS 
220 and delivers the message to the public network ANC 130 so that the terminal AT 210 connects 
to the public EV-DO wireless network. 

[0060] Further, when the terminal AT 210 desires to connect to the private EV-DO wireless 
network 200, the pANC 230, as in the public network, recognizes a discriminator contained in the 
message which is sent from the private ANTS 220 to enable the pANC 230 to support the private 
EV-DO wireless network 200 service using network elements disposed in the private area. For 
reference, the discriminator which can discriminate the private EV-DO wireless network 200 and 
the public EV-DO wireless network 100 is provided from the EV-DO wireless terminal AT 210. 
[0061] The private EV-DO wireless network 200 of which the security is required is adapted to * 
have a subnet and a color code (/.e, DLR discriminating factor) different from the public EV-DO 
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wireless network 100. 

[0062] Accordingly, when the terminal AT 2 1 0 enters the private EV-DO wireless network 200, ' 
the terminal AT 2 1 0, which enters the private EV-DO wireless network 200, recognizes the changed 
subnet and provides a UATI request message (UatiRequest Message) to the router module 225 
through the private ANTS 220. The router module 225 routes the UATI request message, which is 
provided through the private ANTS 220, to the private pDLR 240 through the private pANC 230. 
[0063] The private pDLR 240 closes the session of the existing public EV-DO wireless network 
100, and creates and establishes a new session of the private EV-DO wireless network 200. 
[0064] Once the private EV-DO wireless network 200 session with the corresponding AT 2 1 0 is 
again established by the private pDLR 240, the AT 2 1 0 is not allowed to respond to the paging from 
the public EV-DO wireless network 1 00. Even though the AT 2 1 0 attempts origination to the public 
EV-DO wireless network 1 00, the call connection will be failed since the session held by the public 
network DLR 160 and the session held by the AT 210 are different from each other. 
[0065] Further, the router module 225 routes all of the session establishment related messages to 
the pANC 230 being a private control station to prevent the public EV-DO wireless network 100 
session from being again established in the private EV-DO wireless network 200, such that the • 
public EV-DO wireless network 100 connection call is originally blocked. 
[0066] When a call connection from the AT 2 1 0 entering the private EV-DO wireless network 200 
is established, the private authentication of the corresponding AT 2 1 0 is as follows. When receiving 
a unique ID (identification) value of the AT 210 called a network access identifier (NAI) from the 
AT 210, the pANC 230 accesses the pAN_AAA 260 to request the authentication with the NAI 
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value received from the AT 210. 

[0067] The pAN-AAA 260 authenticates that the corresponding AT 2 1 0 is a terminal registered 
in the private EV-DO wireless network 200 based on the NAI value of the AT 210 provided from 
the pANC 230. 

[0068] If the authentication of the corresponding AT 210 through the pAN_AAA 260 is 
successful, a mobile node identifier (MN ID) value as a return value is provided to the corresponding 
AT 210. 

[0069] An operator of the private EV-DO wireless network 200 will register in the pAN_AAA 
260 the NAI value of the AT 2 1 0 to which the private EV-DO wireless network 200 service has been 
permitted. 

[0070] That is, when the authentication is requested from the AT 210, the pAN__AAA 260 
recognizes the NAI value of the AT 2 1 0 and, when it is the AT 2 1 0 registered in the private EV-DO ' 
wireless network 200, provides the MN ID value as a return value to the AT 210 to perform an 
authentication success process and, when the corresponding AT 210 is not registered in the private 
EV-DO wireless network 200, performs an authentication denial process. 
[0071] In the end, a new session is produced and then authentication process in the pAN_AAA 
260 is completed only for the AT 210 registered in the private EV-DO wireless network 200, and 
the MN ID of the AT 210 is stored in the pDLR 240 along with the session information, such that 
the AT 210 is served by the private EV-DO wireless network 200. 

[0072] Meanwhile, if the terminal is deviated from the private EV-DO wireless network 200 to 
the public EV-DO wireless network 100, it is served by the public EV-DO wireless network 100 
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through the above-stated process. 

[0073] A method for processing a data call in a private EV-DO wireless network system according 
to the present invention, which corresponds to the above-stated operation of the apparatus for 
processing the data call in the private EV-DO wireless network system according to the present 
invention, will be discussed according to steps with reference to the accompanying drawings. 
[0074] Fig. 2 is a view illustrating a private EV-DO wireless network session establishment 
process when a terminal enters a private EV-DO wireless network in a method for processing a data 
call in a private EV-DO wireless network data system according to the present invention, Fig. 3 is " 
a view illustrating a procedure of call processing in a private EV-DO wireless network when there 
is a private EV-DO wireless network connection request from a terminal entering the private EV-DO 
wireless network in a method for processing a data call in a private EV-DO wireless network system, 
and Fig. 4 is a view illustrating a procedure of call processing in a private EV-DO wireless network 
when there is a private EV-DO wireless network connection request from a terminal entering the 
private EV-DO wireless network in a method for processing a data call in a private EV-DO wireless 
network system according to the present invention. 

[0075] First, an establishment operation of a private EV-DO wireless network session with respect 
to the AT entering the private EV-DO wireless network will be discussed with respect to Fig. 2. 
[0076] As shown in Fig. 2, if the AT 2 1 0 enters the private EV-DO wireless network 200, the AT 
210 recognizes the changed subnet and loads oldati held by the AT 210, namely, an existing UATI 
value allocated in the public EV-DO wireless network 1 00 on a Uati request message (UatiRequest 
Message) to send it to the router 225 through the ANTS 220 as a private base station (SI 01). 
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[0077] The router 225 routes the UATI request message in which the oldati value of the AT 2 1 0 
sent through the ANTS 220 is contained to the pANC 230, and the pANC 230 sends the UATI 
request message in which the oldati value of the AT routed through the router 225 is contained to 
the private pDLR 240 (S 1 02). 

[0078] The private pDLR 240 analyzes the oldati value of the AT provided by the pANC 230 to 
determine whether the corresponding oldati value is the UATI value allocated by the private pDLR. 
[0079] If the UATI value of the AT provided from the pANC 230 is not the UATI value allocated 
by the private pDLR, that is, because the UATI value of the AT entering the private EV-DO wireless 
network 200 is a UATI value allocated by the public DLR 160, the private pDLR 240 rightly 
determines that it is not the UATI value allocated by the private pDLR. 

[0080] Thus, because the UATI value of the AT provided from the pANC 230 is not the UATI 
value allocated by the pDLR 240, the pDLR 240 loads unknown UATI information indicating that 
it is not the UATI value allocated by the pDLR 240 on a UATI response message (UatiResponse . 
Message) to send it as a return value to the private pANC 230 (SI 03). 

[0081] The pANC 230 closes the session created in the AT 2 1 0 and the public EV-DO wireless 
network 100 based on the unknown UATI information loaded on the UATI response message sent 
from thepDLR240 (S104). 

[0082] If the session is closed, the AT 210 produces a random UATI value and reloads the ' 
produced random UATI value on the UATI request message (Uati Request(Nati :New UATI)) to send 
it to the pDLR 240 through the ANTS 220, the router 225 and the pANC 230 (SI 05). 
[0083] The pDLR 240 allocates a new UATI according to the new UATI request message sent 
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through the pANC 230 from the AT 2 1 0, and establishes the private EV-DO wireless network 200 
session with the AT 210 to store it in its own database (SI 06). 

[0084] After the private EV-DO wireless network 200 session is established with the AT 2 1 0, the 
pANC 230 provides a private authentication request message to the AT 210 to attempt the 
authentication between the AT 210 and the pAN_AAA 260. 

[0085] The AT 2 1 0 provides authentication information to the pAN_AAA 260 through the pANC 
230 in response to the authentication request message from the pANC 230, and the pAN_AAA 260 
performs the private EV-DO wireless network 200 authentication according to the authentication 
information provided from the AT 210. 

[0086] When the authentication of the corresponding AT 210 is successful as a result of the 
authentication, namely, when the corresponding AT 210 is the AT 210 registered in the private 
EV-DO wireless network 200, the pAN_AAA 260 provides the MN ID information of the 
corresponding AT 210 to the pDLR 240 through the pANC 230. 

[0087] Accordingly, the pDLR 240 will finally store the MN ID information of the corresponding 
AT 210, provided from the pAN_AAA 260, in the database of the pDLR 240 (SI 07). 
[0088] In the end, with the present invention, when the AT 2 1 0 enters the private EV-DO wireless 
network 200 of which the security is required, the session of the AT 210 with the existing public 
EV-DO wireless network 1 00 is closed, a new session with the private EV-DO wireless network 200 
is established and is stored to allow the AT 2 1 0 to block the connection later upon connecting to the 
public EV-DO wireless network 100 through the private EV-DO wireless network 200. Further, if 
the AT 1 10 in the public EV-DO wireless network 100 attempts to connect to the private EV-DO 
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wireless network 200 through the public EV-DO wireless network 100, the connection is blocked 
because the session of the public EV-DO wireless network 1 00 and the session of the private EV-DO 
wireless network 200 are different from each other. 

[0089] That is, if the AT 2 1 0 enters the private EV-DO wireless network 200, a new session with 
the private EV-DO wireless network 200 is initiated and thus the AT can be served only by the 
private EV-DO wireless network 200. 

[0090] A method for processing a call when the AT 2 1 0 attempts to connect to the private EV-DO 
wireless network 200 at the state where the corresponding AT 2 1 0 enters the private EV-DO wireless 
network 200 and a new session is established as described above will be discussed with reference 
to Fig. 3. 

[0091] As shown in Fig. 3, if the AT 2 1 0 entering the private EV-DO wireless network 200 first 
requests a private EV-DO wireless network 200 connection, a call connection request signal 
(UatiRequest (oldati)) is provided to the router 225 through the ANTS 220 (S201). 
[0092] The router 225 routes the call connection request signal from the AT 2 1 0, provided through . 
the ANTS 220, to the pANC 230 (S202). 

[0093] The pANC 230 determines based on the call connection request signal provided through 
the router 225 whether the corresponding call is a private EV-DO wireless network 200 connection 
call or a public EV-DO wireless network 100 connection call. If the corresponding connection call 
is the private EV-DO wireless network 200 connection call, the pANC 230 provides the pDLR 240 
with a session information request signal for requesting session information necessary for the 
connection (S203). Here, a determination as to whether the corresponding call connection request 

Page 24 of 47 



PATENT 
P57052 

signal is a public EV-DO wireless network 100 connection request signal or a private EV-DO 
wireless network 200 connection request signal is discriminated based on an identifier contained in 
the call connection request signal that is provided from the AT 2 1 0. That is, the AT 2 1 0 adds public 
EV-DO wireless network 100 connection identifier or private EV-DO wireless network 200 
connection identifier information according to a user's selection upon generating the call connection 
request signal to provide it to the router 225 through the ANTS 220. Accordingly, the router 225 
discriminates the private EV-DO wireless network 200 connection call and the public EV-DO 
wireless network 100 connection call based on the identifier information contained in the call 
connection request signal and routes the corresponding connection request signal. 
[0094] The pDLR 240 retrieves the session information of the corresponding AT 2 1 0 from the 
database in response to the session information request signal provided from the pANC 230. That 
is, the pDLR 240 retrieves the session information of the corresponding AT 210 stored in the 
database through the session establishment process shown in Fig. 2 and provides the retrieved 
session information of the corresponding AT 210 to the pANC 230 (S204). Here, the MN ED 
information of the corresponding AT 210 is contained in the session information. 
[0095] When the pANC 230 is provided with session information on the corresponding AT 210 
from the pDLR 240, it allocates a traffic channel between the AT 2 10 and the pANC 230 according 
to the provided session information of the corresponding AT 210, such that data service 
establishment is made using the allocated traffic channel (S205). 

[0096] Further, after allocating the traffic channel, the pANC 230 registers the corresponding AT 
210 in the pPDSN 270 so that the private EV-DO service is performed through the pPDSN 270 
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(S206). 

[0097] On the other hand, the pANC re-attempts the session establishment process shown in Fig. 
2 when the session information of the corresponding AT 210 does not exist in the pDLR 240, and 
the pANC re-attempts the authentication process of Fig. 2 when the session information exists but 
the MN ID information of the corresponding AT 210 does not exist in the session information. 
[0098] If the call connection request signal provided from the AT 210 is the public EV-DO 
wireless network 1 00 connection request signal rather than the private EV-DO wireless network 200 
connection request signal in the step S203, the router 225 routes a corresponding call connection 
request signal to the ANC 130a in the public EV-DO wireless network 100. 
[0099] Hereinafter, a procedure of call processing when the AT 2 1 0 entering the private EV-DO 
wireless network 200 attempts to connect to the public EV-DO wireless network 100 will be 
discussed with reference to the accompanying Fig. 4. 

[0100] First, if a call connection request signal is generated from the AT 210, which has entered 
the private EV-DO wireless network 200 as shown in Fig. 4, it is sent to the router 225 through the 
ANTS 220 (S301). 

[0101] The router 225 analyses an identifier contained in the call connection request signal that 
has been sent from the AT 210 and determines whether the corresponding call is a private EV-DO 
wireless network 200 connection call or a public EV-DO wireless network 100 connection call. If 
the corresponding connection call is the public EV-DO wireless network 100 connection call, the 
router routes the corresponding call connection request signal to the ANC 1 30a in the public EV-DO . 
wireless network 100 (S302). 
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[0102] The ANC 130a in the public EV-DO wireless network 100 provides to the public DLR 160 
with a session information request signal to request session information of the corresponding AT 210. 
in response to the call connection request signal from the AT 210 routed through the router 225 in 
the private EV-DO wireless network 200 (S303). 

[0103] The public DLR 1 60 analyzes the session information stored in the database of the public 
DLR 1 60 in response to the session information request signal provided through the ANC 1 30a. The 
DLR 160 provides an error response message (unknown Uati) to the ANC 1 30a because the session 
information of the corresponding AT 210 is not the session information allocated by the DLR 
(S304). That is, the DLR 160 sends an unknown UATI message, as a response message to the 
session information request message, to the AT 210 that has requested the connection through the 
ANC 130a (S305). 

[0104] Thus, the AT 210 experiences the close with respect to the session with the public ANC 
130a that the AT 210 is holding (S306). 

[0105] If the AT 210 sends a UatiRequest message in order to re-initiate the session in the state 
where the session is closed (S307), a corresponding message is provided to the pANC 230 through 
the router (S308) and thus the public network session is not initiated but the private network session 
is re-initiated. Thus, even though the AT 210, which has entered the private EV-DO wireless 
network 200, re-attempts to connect to the public EV-DO wireless network 100, it will fail to 
connect to the public EV-DO wireless network 100 because of the above reason. Since the steps 
S309 and S3 10 have been described in Fig. 2, the explanation will be omitted herein. 
[0106] The present invention can be realized as computer-executable instructions in* 
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computer-readable media. The computer-readable media includes all possible kinds of media in 
which computer-readable data is stored or included or can include any type of data that can be read 
by a computer or a processing unit. The computer-readable media include for example and not 
limited to storing media, such as magnetic storing media (e.g., ROMs, floppy disks, hard disk, and 
the like), optical reading media (e.g., CD-ROMs (compact disc-read-only memory), DVDs (digital 
versatile discs), re- writable versions of the optical discs, and the like), hybrid magnetic optical disks, 
organic disks, system memory (read-only memory, random access memory), non- volatile memory 
such as flash memory or any other volatile or non-volatile memory, other semiconductor media, 
electronic media, electromagnetic media, infrared, and other communication media such as carrier 
waves (e.g., transmission via the Internet or another computer). Communication media generally 
embodies computer-readable instructions, data structures, program modules or other data in a 
modulated signal such as the carrier waves or other transportable mechanism including any. 
information delivery media. Computer-readable media such as communication media may include 
wireless media such as radio frequency, infrared microwaves, and wired media such as a wired 
network. Also, the computer-readable media can store and execute computer-readable codes that 
are distributed in computers connected via a network. The computer readable medium also includes 
cooperating or interconnected computer readable media that are in the processing system or are ' 
distributed among multiple processing systems that may be local or remote to the processing system. 
The present invention can include the computer-readable medium having stored thereon a data 
structure including a plurality of fields containing data representing the techniques of the present 
invention. 
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[0107] An example of a computer, but not limited to this example of the computer, that can read 
computer readable media that includes computer-executable instructions of the present invention 
is shown in FIG. 5. The computer 500 includes a processor 502 that controls the computer 500. The 
processor 502 uses the system memory 504 and a computer readable memory device 506 that 
includes certain computer readable recording media. A system bus connects the processor 502 to 
a network interface 508, modem 512 or other interface that accommodates a connection to another 
computer or network such as the Internet. The system bus may also include an input and output 
interface 510 that accommodates connection to a variety of other devices. 
[0108] In the end, in the apparatus and method for processing a data call in the private EV-DO 
wireless network system according to the present invention, if a terminal enters a private EV-DO 
wireless network of which the security is required, an existing public network session is closed and 
a new private network session is initiated and thus the corresponding terminal is allowed to connect 
only to the private EV-DO wireless network, such that only the private EV-DO service is provided. 
[0109] The above-described apparatus and method for processing a data call in the private EV-DO 
wireless network system according to the present invention independently constructs DLR and 
AN_AAA, which are essential to an EV-DO wireless network configuration, in a private EV-DO 
wireless network to block an EV-DO terminal from maintaining a public network session and allow 
the EV-DO terminal to maintain only a private network session within a private area in building the 
private EV-DO wireless network in an area where security is required, so that the public network 
connection is not established. 

[0110] Thus, it is possible to prevent information outflow through the Internet with a public 
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EV-DO wireless network connection, to limit private service with respect to a terminal having no 
permission, and to block in advance illegal information outflow through the Internet with a private 
EV-DO wireless network connection. 

[0111] Although the preferred embodiments of the present invention have been disclosed for 
illustrative purposes, they are not intended to limit the scope of the present invention. Those skilled 
in the art will appreciate that various modifications, additions and substitutions are possible, without 
departing from the scope of the invention. Therefore, the present invention is not limited to the 
above-described embodiments, but the present invention is defined by the claims which follow, 
along with their full scope of equivalents. 
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